Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: 6eBKfuyNHzpTp4SVSn2pADCDysohCUya5+UGNsh9Vi8=
Subject key identifier: 56:18:8A:92:47:0C:F6:C8:B0:1F:77:CA:0E:05:B3:39:02:FB:41:11
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 0194BCA9DB515C21FA8873F4F870AB45BF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 134F
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: A0tGHJyQnlzoLY0iXzhoD1SqJZc.roa (hash: oVbnnGoqodoLK0UN5iq26bWyV39yu+/qCuUIHAVMGCo=)
2: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: W5BoW7CwtUW93Brs24GsMaUCpImbgJs7UFmL+zePiAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:db:51:5c:21:fa:88:73:f4:f8:70:ab:45:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=56188a92470cf6c8b01f77ca0e05b33902fb4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:f2:62:55:92:05:18:a7:5e:d5:9d:67:bc:
b1:ce:70:ff:52:30:5c:bc:11:d2:60:df:32:53:69:
e3:07:f0:c2:7b:b1:3d:c9:9a:f3:e5:10:81:41:c1:
ae:43:40:bb:ab:82:a4:19:16:c4:8e:d7:3b:26:5a:
22:36:ec:62:98:41:24:eb:aa:8a:d8:00:e6:85:86:
51:75:cb:eb:68:96:8b:33:0c:8f:7f:c6:d9:82:5a:
5c:a9:dd:c9:29:b2:ec:d6:73:2b:cf:d9:c2:28:b5:
db:0c:0c:9e:cf:10:34:91:09:55:13:a2:3c:87:42:
1d:1f:da:cf:f7:ab:dc:b0:79:f3:1d:94:25:35:e6:
45:e2:d8:90:9f:8a:c8:41:73:00:e6:7e:34:09:f5:
d2:cc:4a:0f:70:76:2b:55:5a:dc:b8:2b:5f:73:3e:
a4:0a:71:13:33:5e:b6:2e:58:0f:cd:a3:87:ca:b2:
a1:c1:af:ee:00:c9:cf:28:53:32:dc:50:75:4e:4f:
37:4c:7d:d8:19:52:3f:fd:26:68:44:ef:a6:c6:80:
f4:2c:c2:5a:08:7e:d1:f7:be:10:68:4d:c7:79:20:
5c:54:24:b9:5f:50:1f:02:d4:50:70:84:0e:98:6c:
13:f4:dd:13:9f:50:e8:30:d1:30:ba:3d:02:62:40:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:18:8A:92:47:0C:F6:C8:B0:1F:77:CA:0E:05:B3:39:02:FB:41:11
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:8a:c0:5f:78:a3:fc:35:f9:e8:5c:8e:9c:fd:53:a9:56:
6f:04:4e:e3:ec:ca:8e:54:03:ec:6a:c8:b3:28:d0:d9:12:b2:
f2:02:0c:9f:31:2a:03:75:34:2b:2c:dd:de:3e:93:bf:8e:e2:
ea:9d:7e:a7:a8:1f:4f:75:0c:0c:d7:98:f8:5c:ba:c5:ab:af:
d8:b9:59:9e:0e:7c:1b:bb:58:87:38:56:53:da:fd:a4:80:8e:
48:23:94:83:0f:9c:c4:c3:fb:33:ca:1e:6e:c2:42:db:31:d2:
c5:62:b1:c8:50:67:73:24:34:67:ce:7c:61:f1:d1:8c:0f:82:
5b:c6:6f:d5:49:55:13:a5:51:9c:82:8a:32:19:e7:5e:be:a5:
f3:cd:09:28:9f:62:85:12:66:d6:9f:6d:29:ae:04:3a:d2:25:
80:5a:69:0a:16:af:f3:08:4c:e9:0d:c0:3b:a3:76:75:ad:bd:
82:85:f5:ce:40:cd:76:80:26:2b:6c:16:3a:ac:23:1d:66:f8:
96:96:31:a5:0a:36:cb:aa:9a:5c:d3:54:64:69:45:e4:f0:60:
04:9d:54:d9:e1:b2:f6:ed:77:69:6b:98:3e:ed:af:a6:eb:36:
62:f4:50:98:10:a9:71:71:34:44:cf:13:30:96:7b:f4:17:8b:
a3:3a:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:29 2025 by rpki-client